*.maven.io

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:e1:21:0d:08:6d:dd:d9:3d:fa:c1:24:80:c4:fc:c6 was issued on by GlobalSign nv-sa.

With 114 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.maven.io

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e1:21:0d:08:6d:dd:d9:3d:fa:c1:24:80:c4:fc:c6
Serial Number (int): 2498165141046985923194575369139453126
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 98:58:d0:f7:c6:2b:f5:8c:e6:ba:9a:ab:22:32:3f:05:bf:0f:89:11
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 26:b0:ad:6f:05:74:e4:b2:3a:1f:89:46:a5:f1:21:5a:51:29:8a:e6
Fingerprint (sha256): 20:d1:73:75:89:86:02:36:db:4a:b6:bc:f8:5e:65:41:c2:bd:90:a7:e2:c2:bc:b2:fb:7a:2c:4d:bd:c1:58:84

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate *.maven.io

114

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.maven.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.maven.io
*.si.com
*.sikids.com
*.themaven.net
allhuskers.com
antiquetrader.com
automaven.io
awomanshealth.com
baseballmaven.io
basketballmaven.io
bassmagazine.com
bellatory.com
bio.com
bitcoinmagazine.com
boatersnewswire.com
breakawayropingjournal.com
bringmethenews.com
caloriebee.com
cannabismaven.io
collegesportsmaven.io
dealbreaker.com
defensemaven.io
djbooth.net
earthmaven.io
edm.com
enfuegonow.com
fadeawayworld.com
fadeawayworld.net
familymaven.io
foodmaven.io
footballmaven.io
gamesmaven.io
healthmaven.io
history-origin.prod.saymedia.com
historymaven.io
howtheyplay.com
indiancountrytoday.com
jamiegeller.com
kristyabero.com
letterpile.com
lifestylemaven.io
marinascats.com
maven.io
mavencorp.io
mavendoctors.io
mavenroundtable.io
mavensports.io
militarytrader.com
mishtalk.com
moneymaven.io
mtonews.com
musicmaven.io
newsmaven.io
numismaticnews.net
petmaven.io
remedygrove.com
sci-techmaven.io
scriptmag.com
si.com
soapboxie.com
sportsillustrated-origin.prod.saymedia.com
stablemanagement.com
stylemaven.io
taskandpurpose.com
tatring.com
thearthritisconnection.com
theindependent.io
theshoegame.com
theskincareedit.com
thespinecommunity.com
thestreet.thestreet.com
todaysmama.com
uat.thestreet.com
uptownmagazine.com
wokeamerica.com
writingmaven.io
www.antiquetrader.com
www.awomanshealth.com
www.bitcoinmagazine.com
www.djbooth.net
www.enfuegonow.com
www.hortmag.com
www.howcast.com
www.indiancountrytoday.com
www.inkedmag.com
www.jewlish.com
www.mediatakeout.com
www.militarytrader.com
www.momtrends.com
www.mtonews.com
www.numismaticnews.net
www.oldcarsweekly.com
www.opposingviews.com
www.organicauthority.com
www.scriptmag.com
www.secondspleasesarah.com
www.si.com
www.thearthritisconnection.com
www.thecurlingnews.com
www.themaven.net
www.theskincareedit.com
www.thespinecommunity.com
www.thestreet.com
www.uptownmagazine.com
www.wrestlingnewsworld.com
www.writersdigest.com
youmemindbody.com
thestreet.com
athlonsports.com
wildcatsdaily.com
www.athlonsports.com
allbruins.com
link.si.com
link.thestreet.com

Other certificates including the domain name maven.io

(limited to 100 certificates)
maven.io
cmp.channelpartner.de
dns-vetting1m.map.fastly.net
*.maven.io
automaven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
consent.planetradio.co.uk
dns-vetting1m.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
stable.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
mms.sp-prod.net
cmp.channelpartner.de
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
*.maven.io
leapfrog-ssl-49.gcs-web.com
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
automaven.io
automaven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.computerworld.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.academics.at
dns-vetting1m.map.fastly.net
*.mavencoalition.io
cmp.computerworld.com
cmp.academics.at
*.maven.io
*.maven.io
cmp.academics.at
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
*.maven.io
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net

Certificate

The complete raw certificate details for *.maven.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMbE8Ww9y2HDb7QoTphl
AcHR5NcliVbZFI/U2s5/4t2bxJl9A3cE+L7z5zvXtWlU82aCcklW+/OsHdtGWCFp
PxLRqXa0yEKayRTTu0oQe7FwluYbzUDMOCtNIz3cygaEjgF9WEhPbpyUEW1KiqEz
Nnsa7yOcRO1Q3N6BYgbfO8C54J+/E9lZ/tZcsEczuY/UkUb1pPSSERBFJtxQ0wNh
LYbWpBFhwp9CpmXnLhcTjETxGNiGCN9gkgHPMgI3aSZgBMEnlOH0BKSm4f1F/L1j
eBSpz4/i4dbbxOH7d5HQFEQEG/HEDYSpevInxG/q/Q+QOn5L6qprzMucxs01xPNR
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2498165141046985923194575369139453126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-12 16:05:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-13 16:05:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.maven.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22315958473341525847689735103777246201083143685390666705440171673089418522777936272873846193008580645279520098313325922792550578430900944350829310523348488752820683330915719108423854548157777218101846155370074586839195806031964938996289994397346132104214585806417655190440888426476304306503334395761081098328306412031566972098180261643904170274327893201589890714769502179777311120225824050721769598002816232587834341422909991050538441934415082408486244173062048022909182561857281469608471374985904104848647167401475601087720554558451767315421916637379961385140600209833333966927037695521319162395507788785396309250369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhuskers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellatory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatersnewswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakawayropingjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bringmethenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caloriebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabismaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealbreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defensemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djbooth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadeawayworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadeawayworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamesmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtheyplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiancountrytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiegeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kristyabero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letterpile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinascats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavencorp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavendoctors.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavenroundtable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavensports.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneymaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remedygrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sci-techmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapboxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsillustrated-origin.prod.saymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stablemanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylemaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskandpurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindependent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshoegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wokeamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writingmaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiquetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awomanshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djbooth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfuegonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiancountrytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkedmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jewlish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediatakeout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momtrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numismaticnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldcarsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opposingviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scriptmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secondspleasesarah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thearthritisconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecurlingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theskincareedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptownmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrestlingnewsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writersdigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmemindbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcatsdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlonsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allbruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.thestreet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9858d0f7c62bf58ce6ba9aab22323f05bf0f8911
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ef7cc29a5440386432c5e38f32a6572bcf3a36c03d1f971f124593523ae965db6588703499dd1e366cb3ca418059e38187880b39b288995b5d4e3a9a3e50b00bcee91d1c7e61458facc13ea7f7a766066c080032d0a52f713f928dc77c15e14886200adfe03339eb7558810ac544158921a097a77138d91069d9c1049e0655adc80d7cf8ac0b182eb2807c025a8494c3a51f47e9a46bd0434059640871f04840fd4179371ac025d1d0244aba096cff0614f132eab3159e2589aa80f186a210efb820d08ce5d128e8309364c3b7dc7f604094b68b7b88c19161973d4a5d50f50aa5b3cd8e3cb37fb6e86d84630079823cd68cec10b6fa0de04d3e1e0c450e543